Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/9c507bc2-0580-389d-a51a-6dce50e44d43.roa
File:                     9c507bc2-0580-389d-a51a-6dce50e44d43.roa (raw, json)
Hash identifier:          OLEZDhVKa/fX7t0DiEsoLLFfEV91QPj0IrnBUk6BKfM=
Subject key identifier:   D1:D6:23:F0:CC:48:7D:D0:A6:55:A8:74:A8:19:B0:02:CC:39:85:81
Certificate issuer:       /CN=3976c091-1138-4917-9649-5575618ab7ea
Certificate serial:       010D0C9F4328583EC2C622AEB7C89E8154A1FB00
Authority key identifier: 4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/9c507bc2-0580-389d-a51a-6dce50e44d43.roa
Signing time:             Sun 31 Jul 2022 12:00:00 +0000
ROA not before:           Sun 31 Jul 2022 12:00:00 +0000
ROA not after:            Thu 01 Aug 2024 04:00:00 +0000
asID:                     398465
IP address blocks:        134.202.176.0/21 maxlen: 21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:c2:c6:22:ae:b7:c8:9e:81:54:a1:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3976c091-1138-4917-9649-5575618ab7ea
        Validity
            Not Before: Jul 31 12:00:00 2022 GMT
            Not After : Aug  1 04:00:00 2024 GMT
        Subject: CN=3794c9b0-6e42-43ed-801f-82a69178c751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:56:2f:ef:9b:a4:e7:14:a3:95:f3:40:ae:0c:
                    4d:68:90:10:4c:de:03:69:59:72:c3:52:40:5a:0e:
                    4d:67:81:29:97:d5:e7:c4:b9:2e:78:5f:e8:5a:6a:
                    9b:ac:77:34:59:e6:bf:c5:5c:11:0e:25:d8:7f:68:
                    15:08:fa:a9:fd:3b:19:7e:6b:3a:b6:0c:a9:f1:62:
                    37:d2:00:b9:86:7c:dc:f4:6c:b8:0f:80:b8:c1:a7:
                    f9:67:ae:73:9b:49:72:53:0e:f2:cc:17:cc:20:4e:
                    a1:0d:6d:22:31:8d:ad:82:5a:63:07:6c:be:79:4f:
                    f6:fc:0d:0d:40:05:a9:a3:82:c6:fa:58:32:70:84:
                    cb:40:6c:0c:5d:f7:f6:76:8d:ef:e9:9a:e6:32:6a:
                    da:a0:ae:da:e4:ec:94:3f:c7:37:35:12:3d:45:4e:
                    ef:b6:86:ee:2c:52:2b:8e:5e:e8:af:fb:d6:5c:9b:
                    bb:f4:57:74:90:c9:c1:cd:c0:e9:7d:35:ab:e6:d1:
                    6d:23:23:db:17:db:28:6a:a8:2f:82:81:af:8b:d0:
                    66:b4:13:83:a2:cf:e1:e4:84:2d:15:2a:86:f9:90:
                    1c:05:b3:c7:97:d9:df:f1:77:1e:b9:fd:4d:91:44:
                    12:7d:5c:9e:ee:d2:1e:ad:e3:d0:0d:b3:12:1e:9f:
                    ab:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:D6:23:F0:CC:48:7D:D0:A6:55:A8:74:A8:19:B0:02:CC:39:85:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/9c507bc2-0580-389d-a51a-6dce50e44d43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl

            X509v3 Authority Key Identifier:
                keyid:4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.202.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:b9:38:a8:67:1a:39:df:95:5f:f3:76:14:2d:a2:bb:cb:0e:
         c5:5d:50:5e:26:8e:4c:d7:4f:29:61:29:e9:3a:45:55:f4:02:
         9a:27:3e:dc:a8:fb:aa:77:23:ab:3f:ce:c0:2e:63:59:64:ff:
         5f:64:08:a0:d6:69:e4:5d:93:fa:df:62:40:32:9f:7f:8b:b2:
         95:00:27:28:f9:8e:da:4a:0c:d0:96:7f:ab:ea:eb:3f:e5:b7:
         a4:27:a0:56:e6:95:b1:21:a8:f4:85:78:2d:f8:fa:47:41:d6:
         96:ca:e3:8e:fc:ac:27:36:c2:a7:a6:af:3a:34:84:2e:b7:27:
         b4:43:d1:19:52:f7:69:4e:0f:7d:32:1c:86:43:68:7b:ca:2e:
         ca:f9:71:3a:80:02:51:9b:6f:88:f8:a2:64:72:a1:37:d8:0b:
         90:6f:b7:3d:57:81:6a:a2:6c:f2:76:89:0a:51:e8:ec:32:68:
         60:65:62:4a:29:55:d8:78:b0:aa:70:88:fd:8a:98:1d:44:79:
         08:f2:d6:30:e0:fc:05:c6:e5:0b:31:cd:68:f5:fc:a4:6d:f4:
         b0:de:4a:e7:73:5b:e3:0e:f1:aa:e1:8e:41:f5:2b:e6:38:22:
         dc:8c:53:f3:c9:4f:5e:76:b0:8e:ee:bf:ae:9c:cf:03:aa:ac:
         3f:8d:6f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----